Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/2782423C328D11EEA04CD046C4F9AE02.roa
File:                     2782423C328D11EEA04CD046C4F9AE02.roa (raw, json)
Hash identifier:          Z09F5AzY1XvKD6n1eQLWNeIL3huNLLqxKKeU6qs2LwY=
Subject key identifier:   BF:96:AD:8B:4E:F7:D3:11:DF:85:3C:B7:C6:A4:FA:73:DC:85:2B:88
Certificate issuer:       /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Certificate serial:       04
Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/2782423C328D11EEA04CD046C4F9AE02.roa
Signing time:             Fri 04 Aug 2023 06:07:13 +0000
ROA not before:           Fri 04 Aug 2023 06:07:13 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     7488
IP address blocks:        103.248.48.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
                          rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
        Validity
            Not Before: Aug  4 06:07:13 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64cc9591-d786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:6c:00:d4:43:ad:0e:1b:bb:67:c2:b6:4e:
                    8e:aa:7e:27:67:a0:11:98:8e:09:a2:1d:48:e7:33:
                    36:20:91:d4:e5:17:a3:a6:2d:79:5e:15:7f:42:fe:
                    de:37:32:a3:97:d6:7d:02:5d:67:94:ca:20:63:9d:
                    6c:11:a0:d1:89:63:54:f7:cb:4f:47:ba:7b:fe:e9:
                    d3:08:5a:47:b2:67:34:34:a1:2c:1d:d5:f7:c3:7b:
                    08:ed:b1:c3:a0:e3:aa:82:a0:b1:49:96:44:ae:dd:
                    02:17:6d:e4:c6:c3:99:6c:68:95:8c:6f:89:be:9f:
                    85:fc:fe:95:7b:5c:d9:4a:cf:ef:ae:4e:63:60:3f:
                    c4:6f:3a:70:68:b5:50:29:93:e9:bc:66:4b:22:e2:
                    ca:96:3d:ef:e6:f2:40:41:31:f5:92:ca:36:6b:e8:
                    7c:93:4e:3e:02:cd:d6:03:03:0a:4b:49:ec:95:20:
                    8e:68:cc:64:3b:ec:8e:4c:cf:91:bd:9f:e1:c6:35:
                    a8:f4:20:6d:8b:ff:23:2e:20:a0:04:a4:6c:82:ea:
                    4f:83:dc:b1:1f:a6:0e:49:ba:bc:5c:9c:7f:09:f3:
                    04:24:c6:19:31:dc:57:9d:27:d2:29:cf:e0:9f:ef:
                    f2:d3:b8:47:92:2b:c9:cf:51:0a:d3:5f:77:d5:a9:
                    23:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:96:AD:8B:4E:F7:D3:11:DF:85:3C:B7:C6:A4:FA:73:DC:85:2B:88
            X509v3 Authority Key Identifier:
                keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/2782423C328D11EEA04CD046C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:89:d6:be:17:67:22:e2:45:24:f6:fb:64:b9:08:e5:e4:65:
         68:de:14:18:f7:4f:af:58:09:3e:81:05:7a:f1:d9:60:e5:0d:
         d4:09:e3:f7:87:05:9f:61:5c:96:e7:77:b6:dd:46:b5:d9:64:
         0f:0a:0d:63:bc:e8:93:ac:21:22:98:5b:66:8b:b7:5b:ed:e1:
         8d:05:fc:a3:e1:42:0b:3a:12:eb:f1:5f:59:7c:2d:9a:37:63:
         20:0b:f2:b7:db:65:8e:ed:ae:f7:d2:04:92:75:2b:f7:71:5d:
         a7:a4:85:6a:23:d4:a2:b7:a5:8b:2b:08:15:ba:41:48:10:b1:
         3f:be:2c:9c:78:86:5c:6a:e1:6a:f9:95:d4:e6:78:15:6f:bd:
         c0:99:89:2d:be:5a:d8:18:96:64:47:0c:57:4b:d8:c5:7a:58:
         f7:5f:fc:54:d0:a9:29:14:58:8d:6d:96:bd:76:4c:28:f7:9b:
         ae:6b:c4:9a:98:80:2c:e1:b4:c1:0b:87:3c:08:58:18:f7:d7:
         7f:1f:6e:4d:eb:7c:26:1a:28:f3:ed:eb:fe:07:55:64:82:d3:
         99:67:8b:cc:49:da:af:22:0c:84:40:d0:51:84:c7:52:a9:73:
         52:0f:d4:1b:29:b5:2f:91:50:b9:30:e5:7a:b4:61:3a:86:ac:
         ab:01:b1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 08:17:47 2024 by rpki-client on console-fra.rpki-client.org